Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
File: k89OeSfhBJZOTJb0QWSc40F0zjo.mft (raw, json)
Hash identifier: kBqCNXKFItY0XHfhKd8hsVx1PCTI+hr7HrNQqGY8OXc=
Subject key identifier: 8A:6F:E2:15:29:51:F4:F5:BE:00:F6:7C:1B:96:D2:C7:E8:04:50:AA
Authority key identifier: 93:CF:4E:79:27:E1:04:96:4E:4C:96:F4:41:64:9C:E3:41:74:CE:3A
Certificate issuer: /CN=93cf4e7927e104964e4c96f441649ce34174ce3a
Certificate serial: 0196BF00D8044A1006E711CE1EB1E7DC99C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
Manifest number: 1532
Signing time: Sun 11 May 2025 11:00:25 +0000
Manifest this update: Sun 11 May 2025 11:00:25 +0000
Manifest next update: Mon 12 May 2025 11:00:25 +0000
Files and hashes: 1: DVEsULbgc1uy6V52nNRIcIhepiA.roa (hash: XNV6aUJyGeh2Aa9mxZ1t5TwCl8DNIg+I/K5KbgR9/Ys=)
2: k89OeSfhBJZOTJb0QWSc40F0zjo.crl (hash: j4EWBe+nJ85S7tHvXJInjCxKZ9AesC9VE/Xy2ybeKCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:00:d8:04:4a:10:06:e7:11:ce:1e:b1:e7:dc:99:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93cf4e7927e104964e4c96f441649ce34174ce3a
Validity
Not Before: May 11 11:00:25 2025 GMT
Not After : May 12 11:00:25 2025 GMT
Subject: CN=8a6fe2152951f4f5be00f67c1b96d2c7e80450aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a7:25:55:4a:4e:44:98:8d:2a:51:9d:5e:2f:
7e:34:5b:2a:0f:b6:15:6e:42:80:ab:ef:49:68:b8:
b0:b6:9d:30:a8:15:0e:92:39:e1:47:9f:cb:10:96:
60:4d:ff:fa:d7:76:1a:30:38:be:5d:9d:8e:37:f3:
bc:4d:1b:49:f5:60:39:76:8f:8f:25:7a:9b:f1:69:
80:34:cd:e6:ff:61:0d:f3:8c:3b:d5:8c:26:41:82:
0e:2a:9c:cd:ac:22:72:70:e0:36:91:bb:ce:ad:a8:
02:9d:dd:5b:e0:a8:46:b1:d2:38:de:27:c8:9e:61:
fd:de:10:0a:ab:fe:ed:b6:7e:ec:a1:7b:51:6e:f4:
de:32:d7:0d:d9:3f:22:9a:d1:5a:05:58:7b:47:52:
56:52:c5:4e:42:13:89:af:6c:59:36:f1:02:a2:1c:
6a:7d:3b:95:33:84:27:33:44:d7:89:0b:65:bb:d6:
53:88:c4:35:5b:d4:2f:06:ad:43:62:bd:78:cf:41:
2a:45:78:08:00:18:c3:52:27:78:2f:bb:a7:cb:18:
59:63:72:a7:7d:f5:15:c8:ed:7d:f6:e5:7f:0b:f8:
25:83:47:fa:dd:ce:01:ac:f5:d4:f4:dd:94:41:f2:
cb:65:8c:f1:08:e0:23:4b:ae:75:80:4d:b2:82:1f:
c7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6F:E2:15:29:51:F4:F5:BE:00:F6:7C:1B:96:D2:C7:E8:04:50:AA
X509v3 Authority Key Identifier:
keyid:93:CF:4E:79:27:E1:04:96:4E:4C:96:F4:41:64:9C:E3:41:74:CE:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:78:4f:83:9e:02:4c:86:08:cb:c7:0e:bd:62:e5:8b:de:76:
7b:7a:b3:7f:29:7d:ab:af:8d:a1:9a:37:99:ef:6d:5a:fc:8d:
3e:c2:63:57:46:50:9a:f2:11:b4:91:70:91:e5:cf:e5:fe:7b:
c6:f6:46:85:ee:9d:43:1f:0b:55:66:a4:3b:d9:58:e9:ab:ba:
e5:30:5d:71:5b:38:ae:a8:c6:d6:59:a2:a5:e7:9a:da:d5:96:
ea:52:0f:0d:79:2b:00:1e:49:41:15:52:85:fe:e5:b4:64:13:
8d:89:9f:76:66:e3:c3:54:48:e8:dd:d6:bc:a3:ba:04:ae:09:
3b:73:bf:0f:da:61:37:1f:6d:92:17:be:8e:a6:53:de:49:3b:
c5:86:1b:2e:25:4a:50:29:15:ae:21:05:76:37:14:21:cd:f7:
03:57:71:ac:b4:0c:60:d2:11:89:00:4d:51:95:0a:66:21:29:
30:5e:78:aa:8f:3e:23:ef:5c:23:24:e1:a8:45:ed:79:fb:d3:
dc:e8:78:30:ed:36:d1:c7:ca:64:b9:1d:5a:43:03:ac:09:99:
e2:94:05:2f:b4:7a:2e:ff:56:b9:61:62:c2:5b:ab:c0:ef:b1:
2b:d5:7d:3c:a1:67:48:55:74:d8:df:fa:a4:01:86:de:e4:a0:
0b:ab:b6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:52:15 2025 by rpki-client